Racoon and setkey problems

[Andrey V. Elsukov]

On 19.02.2018 09:27, Misak Khachatryan wrote:
>        1644111 messages with memory allocation failure
> 
> 3 of machines running   10.4-RELEASE-p1, one 10.3.
> Two of the machine almost the same, only ip addresses and few lines of
> configs differ. One is OK, other one have problem.

You can inspect the output of following commands to find where is the
problem:

% vmstat -m | egrep "sec|sah|pol"
% netstat -m

Also net.inet.ipsec.debug=1 will enable some debugging output that can
shed light to what happens.

-- 
WBR, Andrey V. Elsukov

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 553 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20180219/2f3d39cd/attachment.sig>